Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

NAT isn't "security", but it does provide some nice privacy benefits (so IPv6 should absolutely be combined with carrier grade NAT).


Carrier grade NAT does not give the user choice of what they want to do with their network.

If you want to employ NAT on your network, that should be your choice, not your ISP's.


I don't know what "the choice of what they want to do with their network" means. Is there something that you are able to do with a dynamic IP address that you are somehow unable to do behind NAT+PCP? (I mostly hear people complain about stuff that makes no sense, like "I can't do peer to peer connections", when the core problem there was already 100% solved by PCP.)


Instead of NAT there exist a "best practices" firewall setup that mimics what people expect from NAT, available in various home routers in the last 5 years.


The privacy features of NAT are due to the NAT part (mixing your traffic together with all the other traffic so you look like a single entity rather than multiple), not a firewall (which is merely a side effect of a NAT and has nothing to do with privacy).




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: